# Cyware

**Canonical:** https://apis.io/providers/cyware/  
**Website:** https://www.cyware.com/  
**APIs profiled:** 35

Cyware is a New York-headquartered cybersecurity company, founded in 2016, that builds an AI-powered threat intelligence and security operations platform for enterprise SOC teams, ISACs and ISAOs, government agencies, CERTs and MSSPs. The Cyware Intelligence Suite spans Intel Exchange (its threat intelligence platform, formerly CTIX), Collaborate (bi-directional threat sharing for member communities), Orchestrate (security orchestration and automation), Respond (incident case management) and Cyware AI (agentic security analyst workflows). The platform ingests, deduplicates, enriches, scores and operationalizes structured and unstructured cyber threat intelligence using STIX 2.x, TAXII 2.x and MITRE ATT&CK, and pushes it into SIEM, EDR, firewall and ITSM tooling through 400+ integrations. Programmatic access is delivered through the Intel Exchange v3 Open API and the Orchestrate Open API — both tenant-hosted, both authenticated with HMAC-SHA1 signed Open API credentials — plus an open-source Model Context Protocol server that exposes threat-intelligence and playbook actions to LLM agents.

## Kin Score — 55.8 / 100 (developing)

Scored 2026-08-17 under rubric 0.11.0. Trend: flat (+0.0 from 55.8).

| Facet | Score |
|---|---|
| Discoverability | 75.9 |
| Contract Quality | 65.5 |
| Governance | 20.8 |
| Operational Transparency | 39.5 |
| Developer Ergonomics | 60.3 |
| Commercial Clarity | 60.5 |

## Agent readiness — 44.8 (agent-ready)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | no |
| MCP Server | no |
| Auth Clarity | yes |
| Idempotency | no |
| Error Semantics | documented |
| OpenAPI Examples | verified |
| Rate Limit Signal | documented |
| Event Surface Described | yes |
| Agent Skills | derived |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | no |

## APIs (35)

- **Cyware MCP Server** — Open-source Model Context Protocol server, written in Go and published under MIT by Cyware Labs, that exposes Cyware Intel Exchange and Cyware Orchestrate to LLM agents as MCP t...
- **Cyware Administration API** — Administration
- **Cyware Allowed Indicators API** — Allowed Indicators
- **Cyware Analytics API** — Analytics
- **Cyware ATT&CK Navigator API** — ATT&CK Navigator
- **Cyware Authentication API** — Authentication
- **Cyware Code Snippets API** — Code Snippets
- **Cyware Create Intel via Open API API** — Create Intel via Open API
- **Cyware Custom Email Templates API** — Custom Email Templates
- **Cyware Dashboards API** — Dashboards
- **Cyware Detailed Submission API** — Detailed Submission
- **Cyware Events API** — Events
- **Cyware Fang/Defang API** — Fang/Defang
- **Cyware Global Notes API** — Global Notes
- **Cyware Global Tasks API** — Global Tasks
- **Cyware Import Intel API** — Import Intel
- **Cyware Integrations API** — Integrations
- **Cyware Persistent List API** — Persistent List
- **Cyware Ping API** — Ping
- **Cyware PIR API** — PIR
- **Cyware Playbooks API** — Playbooks
- **Cyware Quick Add Intel API** — Quick Add Intel
- **Cyware Reports API** — Reports
- **Cyware RSS Feeds API** — RSS Feeds
- **Cyware Rules API** — Rules
- **Cyware Status Check API** — Status Check
- **Cyware Tag Groups API** — Tag Groups
- **Cyware Tags API** — Tags
- **Cyware Threat Bulletin API** — Threat Bulletin
- **Cyware Threat Data API** — Threat Data
- **Cyware Threat Data Objects API** — Threat Data Objects
- **Cyware Threat Investigation API** — Threat Investigation
- **Cyware Threat Mailbox API** — Threat Mailbox
- **Cyware Watchlist API** — Watchlist
- **Cyware Webhooks API** — Webhooks

## MCP servers (1)

- **cyware-mcp.yml**

## Security (3)

- **Cyware Authentication** — apiKey · 2 schemes
- **Cyware Domain Security** — TLSv1.3 · DNSSEC · DMARC
- **Cyware Trust Center** — SOC 2 Type 2, ISO/IEC 27001:2022, VPAT / Section 508, Privacy Shield

## Tags

threat-intelligence, cyber-threat-intelligence, cybersecurity, security-operations, threat-intelligence-platform, stix, taxii, mitre-attack, soar, security-orchestration, incident-response, threat-intelligence-sharing, isac, indicators-of-compromise, mcp, agentic-ai

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/cyware/). Scores are computed from the provider's own public artifacts under a published rubric.